What’s Vulnerable › Vulnerabilities

CVE-2005-4269

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-12-15 · updated 2026-06-16

Description

mshtml.dll in Microsoft Windows XP, Server 2003, and Internet Explorer 6.0 SP1 allows attackers to cause a denial of service (access violation) by causing mshtml.dll to process button-focus events at the same time that a document is reloading, as seen in Microsoft Office InfoPath 2003 by repeatedly clicking the "Delete" button in a repeating section in a form. NOTE: the normal operation of InfoPath appears to involve a local user without any privilege boundaries, so this might not be a vulnerability in InfoPath. If no realistic scenarios exist for this problem in other products, then perhaps it should be excluded from CVE.

Affected products

• Microsoft Ie: 6.0-sp1
• Microsoft Windows 2003 Server: r2
• Microsoft Windows XP Service Pack 3: all versions

References

• http://support.microsoft.com/kb/908233/
• http://www.securiteam.com/windowsntfocus/6V00B1FEUE.html
• http://support.microsoft.com/kb/908233/
• http://www.securiteam.com/windowsntfocus/6V00B1FEUE.html

Get alerted when CVE-2005-4269 or the next vulnerability affects your stack